Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51556cf2-36af-39c9-bcfb-3c29dd928d2e.roa
File:                     51556cf2-36af-39c9-bcfb-3c29dd928d2e.roa (raw, json)
Hash identifier:          yU2Bqc0XkZlxzmDo9f0xk3kkNhAv0i9cSOeAKtol4Gc=
Subject key identifier:   8C:C3:9D:09:A7:7F:F7:04:AA:B5:D9:88:80:27:99:A2:44:B7:46:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4988EFC9E798A41612C19900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51556cf2-36af-39c9-bcfb-3c29dd928d2e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396608
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:ef:c9:e7:98:a4:16:12:c1:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8e6961b0-f7a1-4f9b-9a91-78d87e911fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:cd:78:9e:cf:73:3c:5f:10:4e:03:3a:65:
                    d0:88:4e:ba:93:7f:f2:cd:9c:a9:48:5b:07:25:c3:
                    08:48:5a:c6:06:29:34:84:20:b1:a6:f6:51:e2:4a:
                    52:4e:53:a7:6e:00:ee:e5:0e:a6:85:4c:c1:d0:2b:
                    8b:b3:08:d1:f1:66:48:12:73:b5:8d:d4:1b:ae:7d:
                    74:9f:1c:7b:07:25:a5:1b:22:31:ba:7a:d0:21:82:
                    e5:68:e9:7b:42:b4:c8:da:21:41:1f:38:bf:6a:a9:
                    05:ba:58:15:f4:81:6a:2c:bf:ba:b9:10:98:20:68:
                    1e:68:a3:ee:fd:7b:f1:01:da:cc:a7:0c:d7:bf:e9:
                    bf:7c:a0:5f:b8:86:fb:2f:26:a9:5c:37:40:12:62:
                    61:a2:f8:4a:8b:42:3d:76:60:08:cd:dc:78:77:7f:
                    2a:09:d6:90:af:1b:4a:be:31:86:7e:d1:57:8e:a3:
                    95:49:f1:10:a2:67:9e:86:e4:25:c1:a8:65:75:a5:
                    af:d5:01:cc:ac:6c:9b:21:ba:7b:98:9c:2e:98:ad:
                    15:f2:5e:b1:64:eb:41:f9:ff:b7:da:5f:94:ad:13:
                    f5:05:b5:ab:29:61:0a:f6:19:43:0d:d0:54:07:b2:
                    c0:fc:74:d5:53:34:3f:a3:34:75:62:2a:85:b5:d7:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:9D:09:A7:7F:F7:04:AA:B5:D9:88:80:27:99:A2:44:B7:46:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/51556cf2-36af-39c9-bcfb-3c29dd928d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:32:28:51:01:2c:35:ee:fb:3f:6d:65:b9:c6:12:7e:85:15:
         0d:da:cb:ab:50:ec:3d:81:71:0a:86:f8:fd:c6:f0:02:37:31:
         36:b3:27:5d:27:0b:ed:ed:cc:d5:38:50:58:cb:e3:ba:59:c4:
         5c:13:67:fd:46:af:cc:77:90:f1:a9:5e:2a:eb:b9:73:ab:54:
         fb:89:20:0a:a5:93:41:fa:76:62:b3:0d:b3:1b:b0:f4:ae:0d:
         02:ac:7e:a2:56:00:2b:eb:87:9e:90:75:7e:ae:11:ba:43:2e:
         5c:54:b5:88:5e:c0:c5:7e:08:a9:5a:85:b9:61:3c:df:f3:e9:
         b6:f7:20:df:d0:f5:d6:2e:30:77:60:a3:db:39:36:22:0f:56:
         9b:01:31:fb:4a:53:db:af:8f:f7:b2:28:be:6d:67:d2:06:65:
         4f:38:5a:0e:47:0b:01:7e:5b:61:9e:7d:f2:01:7f:93:17:85:
         95:7d:84:9c:23:02:bb:88:08:82:9b:e1:6a:37:1d:76:29:3e:
         b1:bb:60:e4:86:28:27:9f:f2:34:3d:b6:27:fa:c6:33:92:15:
         8f:79:b3:fe:f1:0e:54:a6:f0:0a:65:55:dc:cc:0a:e6:07:cb:
         09:c7:77:45:20:30:9a:c2:ef:1e:d7:86:d9:8e:75:ee:25:ce:
         2a:79:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:55 2026 by rpki-client